Elaborating Security Requirements by Construction of Intentional Anti-Models In Proceedings of the 26th International Conference on Software Engineering, ICSE 2004., 2004.